Senior Security Engineer, Amazon

• Are you passionate about managing security at scale?
• We are looking for a self-starter with the drive and conviction to do things right the first time and challenge the status quo
• The ideal candidate for this role is a security technical expert with experience in technical leadership on large-scale systems
• Efficient time management skills are required along with the ability to deliver results in the face of uncertainty
• The successful candidate must be one that can handle several difficult challenges and problems, can make risk-based assessments founded on data and facts
• Methodical, empirical and experimental in approach and evaluation without being bound by over paralysis-by-analysis
• Work to improve knowledge of the security field, threat landscape, security intelligence, moving proactively toward prevention and detection of threats
• Be a learner and curiosity seeker, focusing on what can be done rather than hindered by notions of what cannot be
• Possess effective verbal and written communication skills, be passionate about sharing knowledge, tactics, strategy, as well as advocating for the project mission
• Have excellent time management skills along with the ability to deliver results in the face of uncertainty; and
• Evangelize security within Amazon.com and be an advocate for customer trust
• A successful candidate will be a deeply curious individual who brings technical expertise, and ability to work within a fast-paced startup culture in a large company that has broad business impact
• BS/B.Tech in Computer Science, Information Security, or equivalent professional experience
• 5+ years of experience in application security, product security, or systems security
• 5+ years writing production-level code in at least one scripting or compiled language such as Java, Python, JavaScript, Go, Ruby, C# or C/C++
• Proven experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation
• Strong technical understanding of OWASP Top 10 and application security concepts
• 5+ years of experience securing cloud services, preferably AWS
• A strong understanding of payments processing and financial services technologies

Desirable

• Selling Partner Service is looking for an experienced and self-driven Senior Security Engineer to join our team
• You will be a thought leader in the team
• You will actively contribute to our security strategy and its implementation
• You will lead information security engineering projects to safeguard our services and data
• You will perform risk assessments, threat modelling, security reviews and vulnerability remediation
• You will design and implement security mechanisms, processes and tools to protect against risks
• You will participate in architectural and system design discussions and share your security expertise with technical and business stakeholders across the organization, from engineers to executives
• You will collaborate with other security team and share best practices across the organization
• A Security Engineer in Amazon will be strong in multiple security domains and sought out for advice on technical issues
• Engineers in this role must show exemplary judgment in making technical trade-offs between short versus long term security and business goals
• They must also demonstrate resilience and navigate difficult situations with composure and tact
• This is a unique opportunity to start with Amazon Payments and innovating and scaling security to protect customer trust
• Work closely with service teams to identify threats and vulnerabilities throughout Software Development Life Cycle and provide guidance on mitigating the issues
• Identify and prioritize security problems that can be detected using automation
• Develop detection prototypes for these security problems to enhance our tool-set for static and dynamic analysis
• Work with builders and service teams to address detected security problems in an appropriate and timely fashion
• Identify opportunities to prevent security problems at scale
• Develop prototypes to prevent these security problems
• Document and provide security guidance that will be used across Selling Partner Foundation
• Deliver metrics to show effectiveness of our security initiatives
• A security engineer in Selling Partner Foundation Security team will work closely with application developers, evangelize security and build scalable vulnerability detection mechanisms that help secure applications